Modular valuable media recycling device

ABSTRACT

A modular valuable media recycling device is presented. The valuable media recycling device includes a media infeed module, a validator module, an escrow module, a plurality of media feeder/stacking modules, and a plurality of cassette modules. When a module handles a valuable media item along a media transport path, the module&#39;s identifier and security information are passed as a message to a next module that is to handle the media item in a processing path for the media item. Each module independently validates the authenticity of the message received from a previous module. The number of media feeder/stacking modules and cassette modules are scalable based on the transaction terminal that the modular valuable media recycling device is integrated into.

BACKGROUND

Media handling devices, particularly Automated Teller Machines (ATMs)include a variety of independent devices integrated into the ATM. Thecash handling components are frequently a target by criminals, sincethese components have cash that the criminals want to steal out of theATM.

The ATM includes a variety of cooperating processors for the variousintegrated components. Security is of utmost concern and still there area number of vulnerable operations that expose the cash handingcomponents to unauthorized access by criminals. Two such sensitiveoperations are dispensing cash/notes and depositing cash/notes both ofwhich require user authentication to be performed on the ATM. Forexample, a recycler (component having cash/notes) must authenticate fordeposit and dispense operations using cryptographic keys andcryptographic techniques.

However, the cryptographic techniques and keys are exposed in varyinglevels of degree within the components of the ATM during theauthentication process by the recycler. The techniques and keys are alsoexposed during ATM maintenance and during remote softwareloading/installation at the ATM.

Furthermore, the components transport the media between one another ontransport belts, which presents another opportunity for thieves to add acomponent or remove a component for purposes of intercepting cash.

In addition, the components are not interchangeable or expandable towork with new components that may desired. That is, the components arecentrally controlled and preconfigured to work with one another, suchthat removing or adding components require redesign of the ATM and thesoftware that controls the components whenever new components are addedor some components are removed from the ATM.

A significant amount of resources have been directed to reducing theexposure level of the cryptographic techniques and keys within ATMs.However, the criminals are ingenious and are continually evolving tochange tactics based on industry adjustments to the design and operationof the ATMs.

SUMMARY

In various embodiments, a modular valuable media recycling device andmethods for operating a modular valuable media recycling device areprovided.

According to an embodiment, a modular valuable media recycling device isprovided. The modular valuable media recycling device including aplurality of modules. Each module including its own Printed CircuitBoard having at least one hardware processor. Each hardware processorconfigured to execute firmware instructions that: i) activateelectromechanical components to handle valuable media being processedwith a transaction through the valuable media modular recycling device,ii) validate received security message from a previous module thathandled the valuable media for the transaction, and iii) generate uniquesecurity messages that are independently validated by next modules thatare to handle the valuable media for the transaction.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a system for a modular recycling device of a Self-ServiceTerminal, according to an example embodiment.

FIG. 2 is a diagram of layout for Printed Circuit Boards (PCBs) ofcomponents of the modular recycling device, according to an exampleembodiment.

FIG. 3 is a diagram of the processing and transport paths of valuablemedia within the module recycling device, according to an exampleembodiment.

FIG. 4 is a diagram of the processing and transport paths of valuablemedia being deposited into the modular recycling device, according to anexample embodiment.

FIG. 5 is a diagram of the processing and transport paths of valuablemedia being dispensed from the module recycling device, according to anexample embodiment.

FIG. 6 is a diagram of the processing and transport paths of valuablemedia for transaction agnostic operations within the modular recyclingdevice, according to an example embodiment.

FIG. 7 is a diagram of the processing and transport paths of valuablemedia into and out of the media cassettes of the modular recyclingdevice, according to an example embodiment.

FIGS. 8-10 are diagrams depicting configurations and modules of themodular recycling device to accommodate different lengths of a transportpath in desired configurations of a SST, according to exampleembodiments.

FIG. 11 is a diagram of a method for operating the modular recyclingdevice, according to an example embodiment.

FIG. 12 is a diagram of another method for operating the modularrecycling device, according to an example embodiment.

FIG. 13 is a diagram of still another method for operating the modulerecycling device, according to an example embodiment.

FIG. 14 is a diagram of yet another method for operating the modularrecycling device, according to an example embodiment.

FIG. 15 is a diagram of another method for operating the modularrecycling device, according to an example embodiment.

FIG. 16 is a diagram of another method for operating the modularrecycling device, according to an example embodiment.

FIG. 17 is a diagram of a modular media recycling device, according toan example embodiment.

FIG. 18 is a diagram of modular valuable media recycling device,according to an example embodiment.

FIG. 19 is a diagram of still another modular media recycling device,according to an example embodiment.

DETAILED DESCRIPTION

FIG. 1 is a system 100 for a modular recycling device of a Self-ServiceTerminal, according to an example embodiment. It is to be noted that thesystem 100 is shown with only those components relevant to understandingthe various embodiments presented herein for a modular recycling device.

As used herein, the phrase “valuable media” refers to media of value,such as currency, coupons, checks, negotiable instruments, valuetickets, and the like. As such, the phrases and terms “media,” “valuablemedia,” “document,” “currency note,” and “note,” may be usedsynonymously and interchangeably herein.

For purposes of the discussions that follow with respect to the FIGS.1-18, “valuable media” is referred to as “notes” and the “modularrecycling device” is referred to as a “recycling device.”

As used herein a “module” is an independent electromechanical devicethat may or may not have its own Printed Circuit Board (PCB) withsoftware/firmware processing capabilities (through at least one hardwareprocessor, memory, and non-volatile storage). Therefore, one module mayhave its own independent PCB, while another module may be controlledthrough a different module's PCB. Additionally, a “module” may be usedsynonymously and interchangeably with the terms “component,” and “node.”

As used herein, a “security processor” is a processor that isPCI-certified, includes: encryption engines; tamper pins and secure keystorage; voltage, frequency, temperature monitors and a die activeshield; on-the-fly encryption/decryption, and a secure boot procedure.The processor pins are protected by an encasing Printed Circuit Board(PCB) mesh. The PCB mesh is connected to the processor's tamperresponsive circuit, such that when the mesh is broken, the encryptionkeys are erased.

Conventionally, components of an ATM (one type of Self-Service Terminal(SST)), are centrally controlled by a host Personal Computer (PC)through a core ATM application that processes on the host PC. Anyintegrated modules that are relevant to note deposit and note withdrawaltransactions may have processing capabilities; however, the modules donot collaborate with one another; rather, collaboration, if done at all,is achieved through the processing of the core ATM application. Thismeans that modules can be more easily compromised, bypassed, and/orswapped out by intruders with insecure modules or missing modules,creating security concerns for notes being deposited or withdrawn fromthe ATM.

Furthermore and conventionally, the feeder/stackers (f/s) of the lowertransport module are integrated into the media (note) cassettes, whichmeans any security relevant to the cassettes is entirely controlled bythe cassettes and tightly coupled into the cassette. Such architecturealso prevents scalability of the ATM with respect to the cassettes.

There are a number of scenarios that are of concern on ATMs in terms ofsecurity, such as malicious software that implements attacks to: fool acustomer into making a deposit and return the deposit to a criminal(malware cash trap), and dispense cash from the recycler module to acriminal (malware cash dispense). For malware cash trap the commandsthat are vulnerable include: open shutter, close shutter, count, andstore. For malware cash dispense the commands that are vulnerableinclude stack.

Other security concerns are present when deposit/dispense modules arebypassed or swapped out with malware infected or insecure modules thatpermit a thief to dispense notes from the cassettes.

The system 100 for a modular recycling device described herein correctsthe lack of scalability and improves on the security holes of thedeposit/dispense modules in a SST over conventional approaches. This isdone by changing the conventional architecture and the conventionalprocessing associated with processing a note during a deposit or duringa withdrawal through novel module message passing that includes securityprocessing.

As will be described more completely herein, the system 100 provides amodular and scalable architecture that collectively defines aninfrastructure for distributed note handling (processing), where themodules (may also be referred to as “nodes” herein) collaborate over asecure device-level (SST composite device-level) Intranet. This providesdistributed command, control, security, and data functions for depositand withdrawal note processing within the SST.

The system 100 includes a pocket infeed module 110, an escrow module120, an upper note transport module 130, a centralizer module 140, anote validator module 150, a lower note transport module 135, aplurality of f/s modules 151-155, a plurality of cassette modules161-165, and a plurality of exception cassette modules 170.

The transport paths that a note can take during deposit and withdrawaloperations on the SST are shown and described below with respect to theFIGS. 3-6.

The pocket infeed module 110 includes a pocket 111 for receiving (duringa deposit operation/transaction) a single note or a bunch of notes(notes represented by the circles in the FIGS. with an “M” inside thecircles). Unlike a conventional pocket infeed module, the pocket infeedmodule 111 also includes its own f/s 112. When a bunch of notes areplaced in the pocket 111, the notes are transported to the f/s 112,which then delivers each note individually to the upper transport module130 to the centralizer 140. The f/s 112 also stacks notes during awithdrawal transaction for delivery through the pocket 111 to a consumerperforming the withdrawal transactions.

In an embodiment, the pocket infeed module 110 is capable of handling adeposit of approximately 300 notes as a bunch deposit maximum and iscapable of dispensing approximately 300 notes as a bunch dispensemaximum.

In an embodiment, the pocket infeed module 110 includes a metal andforeign object detector at the pocket 111 infeed to prevent damage tothe system 100 when non-note objects are put into the pocket 111.

It is also to be noted that although, the pocket infeed module 110 hasthus far been described as receiving notes for processing, the pocketinfeed module 110 is also designed to eject notes during a withdrawaltransaction or when a note is rejected and not stored in one of theexception cassettes 170.

The centralizer 140 ensures that each note being processed within thesystem 100 is centralized on the transport path independent of thedimensions of the notes. The centralizer 140 delivers each note in thebunch to the validator 150. The validator 150 performs noteidentification (note denomination, note type (government backing thenote, check, etc.) on received notes, and the validator 150 performsnote validation processing on received notes to determine whether thenotes are damaged, counterfeit, and/or authentic. The validator 150 thenpasses the note to the escrow 120.

The escrow 120 includes a large escrow 121 for holding/storingauthenticated/validated notes on a rotating drum. The escrow alsoincludes a temporary escrow 122 for holding/storing damaged orcounterfeit notes on a separate rotating drum. The escrow 120 provideseach note to the upper transport 130. The upper transport 130 sends eachnote along the transport path to the lower transport 135.

Conventionally, at this point, the notes would be sent by a conventionallower transport to a conventional cassette. This is not the case withthe system 100, where the lower transport 135 sends the notes to the f/s151-155 and based on the denomination of the note being handled aparticular f/s (e.g., 151) feeds or stacks the note(s) into a particularnote denomination-based cassette (e.g., 161) for storage.

If the note provided by the escrow 120 to the upper transport 130 isreceived by the lower transport 135 as a damaged or counterfeit note,the lower transport 135 directs the note to one of the exceptioncassettes 170 where the note is housed/stored. The exception cassettes170 are removable modules.

The processing described above illustrated a deposit transaction. Theprocessing for a withdrawal transaction is reversed, where a particularcassette 161 or set of cassettes 161-165 (based on the neededdenominations) delivers the notes to the corresponding f/s 151-155. Thenote then is sent to the lower transport 135 and provided to the uppertransport 130 where it is provided to the f/s 112 of pocket infeedmodule 110 and sent from the f/s 112 to the pocket 111 for deliverythrough an aperture (opening) to a customer performing the withdrawaltransaction.

The pocket infeed 110, the escrow 120, the upper transport 130, thevalidator 150, the lower transport 135, each of the f/s 151-155, thecassettes 161-165, and the exception cassettes 170 include their own PCB(with processor, memory, and storage). Conventionally, not all of thesemodules including their own independent processing capabilities orhardware; rather, the modules were controlled by the PCBs of othermodules or exclusively by the host PC of the SST.

Each of the above noted modules (110, 120, 130, 150, 135, 151-155,161-165, and 170) include at least one security processor. Firmware orsoftware is programmed on each module to send and process messagesduring deposit and withdrawal transactions on the SST. The firmwareperforms cryptographic operations on received messages to authenticatethe received message. Furthermore, each module includes secure memory orstorage that allows for management by the firmware of cryptographickeys, certificates, hash values, etc. The firmware can process symmetrickey management, symmetric data message authentication, asymmetric PublicKey Infrastructure (PKI) authentication for symmetric key distribution,etc. Each module includes its own unique identifier (e.g., serialnumber, part number, revision and manufacture date and time stamp) thatis utilized to provide each module with a unique cryptographic key/hashvalue. This provides a mechanism by which each module can uniquelyauthenticate and verify each of the remaining modules and determine theauthenticity of any received message during the deposit or withdrawaloperations on the SST. Each module can also generate its own messageswith its own digital signature or modify an existing message that wasprocessed by a previous module and is being sent by a particular moduleto a next module.

As used further herein, the modules 110, 120, 130, 150, 135, 151-155,161-165, and 170 are collectively referred to as the modular recyclingdevice.

Each module of the modular recycling device processes commands, controloperations, and data operations. Moreover, each module of the modularrecycling device is configured to perform self-diagnostic tests onitself and perform fault management operations. Each module of themodular recycling device is configured to cryptographically createmessages, modify existing messages, and validate/authenticate receivedmessages from other ones of the modules that comprise the modularrecycling device. The modules of the modular recycling device providedistributed, collaborative, cooperative, and security-based operationsduring transactions at the SST where notes are being deposited into orwithdrawn from the cassettes 161-165.

FIG. 2 is a diagram of an architectural layout for Printed CircuitBoards (PCBs) of components of the modular recycling device, accordingto an example embodiment.

It is to be noted that other arrangements with more or less PCBs may beused without departing from the modular recycling device embodimentspresented herein. That is, the FIG. 2 represent one examplearchitectural layout and connection pattern of PCBs for the modules thatcomprise the modular recycling device.

The pocket infeed 110 includes a pocket PCB 114, a metal detector PCB113, and the feeder stacker 112. The upper transport 130 and the billvalidator 150 include an upper transport PCB 131. The escrow 120includes an escrow PCB 123. A distribution PCB 131 interfaces/connectsthe PCBs of the pocket infeed 110, the upper transport 130, thevalidator 150, and the escrow 120.

A second distribution PCB 132 interfaces the upper distribution PCB 131to the modules of the lower transport 135. Each f/s (151-155) includesits own modular interconnect PCB (151A-155A). Each cassette (161-165)includes a cassette PCB and a lift PCB 161A-165A. Each cassette PCB161A-165A is connected to a modular interconnect PCB 161B-165B. A USBCAN bridge provides connections from the lower distribution PCB 132 tothe escrow PCB 123.

FIG. 3 is a diagram of the processing and transport paths of valuablemedia within the module recycling device, according to an exampleembodiment.

The FIG. 3 depicts the possible paths for a note through the modularrecycling device during a deposit or a withdrawal transaction at theSST. Again, this is achieved through message (identified as “Mess”) inthe FIGS. 3-6 and the PCBs of the modules that comprise the modularrecycling device.

Specifically, FIG. 3 depicts the possible note paths and messages forprocessing the notes with the upper transport 130 to or from the lowertransport 135. The lower module is intended to include the modules 135,151-155, 161-165, and 170.

The path of the note begins at (1) within the pocket infeed 110. Thefirst Mess identifies whether the transaction at the SST is a deposit ora withdrawal. Assuming, the transaction is a deposit, the note is passedalong the transport path (2) to the centralizer 140 where the note iscentralized (centered) along the transport track. If the Mess was awithdrawal transaction, then the Mess (3) is sent from the packet infeed110 to the lower module (135, 151-155, 161-165, and/or 170). The notereceived (4) for a withdrawal from the lower module (135, 151-155,161-165, and/or 170) or a note being deposited is received by thecentralizer 140 (2 or 5) and centered along the transport path. Next,the escrow module 120 sends a message to receive the note (6 and 7) fromthe centralizer 140. The centralizer 140 provides the note (8) to thebill validator 150. The bill validator 150 validates or invalidates thenote and sends the note (9) where it is received (10) by the escrow 120.The escrow 120 then waits until all notes in a bunch being deposited arereceived (11) more notes are received at (12). The escrow provides notesassociated with rejected notes, at (13), to the f/s 111 of the pocketinfeed 100, the f/s 111 receives the rejected notes at (14) and waits(15) until all notes in a bunch associated with a rejected notes arereceived from the escrow 120. The f/s 111 provides notes from a bunchbeing deposited at 16. The lower module (135, 151-155, 161-165, and/or170) receives notes being deposited at 17 and waits at 18 until allnotes are received by the lower module (135, 151-155, 161-165, and/or170).

FIG. 4 is a diagram of the processing and transport paths of valuablemedia being deposited into the modular recycling device, according to anexample embodiment.

Specifically, FIG. 4 illustrates the note paths and messages for theupper transport 130 that are provided to the lower modules (135,151-155, 161-165, and/or 170) for storage in the appropriate cassettes161-165.

At 1 a message is sent that a deposit for a bunch of notes is being madeon the SST to the lower module (135, 151-155, 161-165, and/or 170). Thenotes are individually sent from the bunch maintained by the f/s 111 tothe centralizer 140. The centralizer 140 provides each note from thebunch to the bill validator 150. The bill validator 150 provides to eachnote from the bunch to the escrow 120. At 2, the pocket infeed 110 sendsa message when the last note of the bunch is processed through the f/s111 to the escrow 120. The escrow 120 waits until receiving message 2 toprocess the notes from the bunch. It may be that one or more invalidatednotes are sent back from the escrow 120 to the f/s 111 for ejection outthe pocket infeed 110 based on validation information received from thevalidator 150 while the notes were processed.

The note path associated with deposits to the escrow 120 can be seen inpath 1-2-8-9-10-11 in the FIG. 3. While note path associated deposits tothe lower module (135, 151-155, 161-165, and/or 170) can be seen in path1-3-17-18 in the FIG. 3.

FIG. 5 is a diagram of the processing and transport paths of valuablemedia being dispensed from the module recycling device, according to anexample embodiment.

Specifically, the note paths and messages associated with dispensing abunch of notes or a single note from the lower module (135, 151-155,161-165, and/or 170) back to the pocket infeed 110 for delivery to aconsumer during a withdrawal transaction at the SST are depicted in theFIG. 5.

A message is sent at 1 to the escrow 120 at 1 to wait until the allnotes being dispensed are sent by the lower module (135, 151-155,161-165, and/or 170) to the escrow module, and the pocket infeed 110 isinstructed to wait at 2 for notes of the bunch being dispensed by thelower module (135, 151-155, 161-165, and/or 170).

The note path for dispensing from the lower module (135, 151-155,161-165, and/or 170) to the escrow 120 is shown in the FIG. 3 as notepath 4-5-8-9-10-11. While the note path to dispense to the pocket infeed110 is shown in the FIG. 3 as note path 4-5-8-9-12-13-14-15.

FIG. 6 is a diagram of the processing and transport paths of valuablemedia for transaction agnostic operations within the modular recyclingdevice, according to an example embodiment.

Specifically, the FIG. 6 depicts the note paths and messages duringdispense and deposit operations.

A message is sent at 1 to the pocket infeed at 1 to wait until the notesbeing dispensed are acquired and the lower module (135, 151-155,161-165, and/or 170) is instructed to wait at 2. The escrow module 120waits at 3 until all notes are received to satisfy the withdrawaltransaction.

The note path associated with dispensing from the escrow 120 is shown inthe FIG. 3 as note path 6-13-14-15. The note path associated withdepositing from the escrow 120 is shown in the FIG. 3 as note path6-16-17-18. The note path associated with escrow to escrow operations isshown as note path 6-7-8-9-10-11 in the FIG. 3.

FIG. 7 is a diagram of the processing and transport paths of valuablemedia into and out of the media cassettes of the modular recyclingdevice, according to an example embodiment.

Specifically, the shows the note paths and messaging for notes beingreceived into or dispensed from the cassettes 161-164 and/or theexception cassettes 170 utilizing the modular f/s 151-154. The f/s151-154 are decoupled from the cassettes 161-164. Conventionally, thef/s are integrated into the cassettes. The arrows depict the note pathsinto and from the cassettes 161-164 and/or the exception cassettes 170within the lower transport 135 as received from or being provided to theupper transport 130.

FIGS. 8-10 are diagrams depicting configurations and modules of themodular recycling device to accommodate different lengths of a transportpath in desired configurations of a SST, according to exampleembodiments.

Specifically, the FIGS. 8-10 illustrate how a desired number of feeders151-155 and cassettes 161-165 can be configured within a modularrecycling device of a SST. The length and width of the transport trackbetween the pocket infeed 110 with respect to both the lower transport135 and the upper transport 130 can be short (shown with the arrow 115).The width of the track can be long while the length is short (shown withthe arrow 116). Moreover, the width of the track and the length of thetrack can both be long (shown with the arrow 117). This scalability isshown in each of the FIGS. 8, 9, and 10.

Additionally, the number of cassettes 161-165 can be varied asillustrated with 3 (161-163) in the FIG. 8, 4 (161-164) in the FIGS. 9,and 5 (161-165) in the FIG. 10.

One f/s (one of 151-155) handles externally feeding a note or stacking anote in a corresponding one of the cassettes (one of 161-165).

This modular architecture provides scalability and customization fordifferent SSTs, cassette configurations, and servicing access (throughrear of front service access panels).

In an embodiment, the modular recycling device (135, 151-155, 161-165,and/or 170) is integrated into a SST. In an embodiment, the SST is anATM. In an embodiment, the SST is operated in customer-assistance modeby a clerk as a Point-Of-Sale (POS) terminal. In an embodiment, the SSTis a kiosk.

These and other embodiments are now discussed with reference to theFIGS. 11-18.

FIG. 11 is diagram of a method 1100 for operating the modular recyclingdevice, according to an example embodiment. The method 1100 is processedon at least one processor of a modular recycling device.

In an embodiment, the modular recycling device is modules 110, 120, 130,150, 135, 151-155, 161-165, and 170. In an embodiment, the modularrecycling device is integrated into a SST. In an embodiment, the SST isan ATM. In an embodiment, the SST is operated in a customer-assistancemode of operation by a clerk as a POS terminal.

In an embodiment, the method 1100 is performs the media item (note)processing within the modular recycling device as one of the modules110, 120, 130, 150, 135, 151-155, 161-165, and 170.

In an embodiment, the method 1100 performs the message and noteprocessing described above with the FIGS. 1-10.

At 1110, the method 1100 generates a security message when an item ofmedia (valuable media, note, and/or bill) is detected at a sensor of themodular recycling device.

In an embodiment, at 1111, the method 1100 includes a module identifierwithin the security message. The module identifier identifies the module(one of 110, 120, 130, 150, 135, 151-155, 161-165, and 170) this ishandling/processing the media item.

In an embodiment, at 1112, the method 1100 encrypts the security messagewith cryptographic operations.

In an embodiment, at 1113, the method 1100 generates the securitymessage in response to receiving a different security message that wasalready associated with the media item.

In an embodiment of 1113 and at 1114, the method 1100authenticates/validates the different security message before generatingthe security message.

In an embodiment of 1114 and at 1115, the method 1100 processescryptographic operations to verify that a previous module that processedthe media item also generated and provided the different securitymessage with the media item.

In an embodiment, at 1116, the method 1100 receives the media item froma transport track that urges the media item through the modularrecycling device in accordance with a transaction being processed on aSST having the modular recycling device integrated therein. In anembodiment, the transaction is a deposit transaction at the SST. In anembodiment, the transaction is a dispense transaction at the SST.

At 1120, the method 1100 processes/handles the media item the mediaitem. This depends on the module (110, 120, 130, 150, 135, 151-155,161-165, and 170) associated with the method 1100 as discussed abovewith the FIGS. 1-10.

At 1130, the method 1100 forwards the media item within the modularrecycling device with the security message for downstream processingassociated with the media item.

In an embodiment, at 1131, the method 1100 instructs electromechanicalcomponents of the modular recycling device to activate and deactivate toforward the media item within the modular recycling device for thedownstream processing on the media item.

FIG. 12 is a diagram of another method 1200 for operating the modularrecycling device, according to an example embodiment. The method 1200 isprocessed on at least one processor of a modular recycling device.

In an embodiment, the modular recycling device is the modules 110, 120,130, 150, 135, 151-155, 161-165, and 170. In an embodiment, the modularrecycling device is integrated into a SST. In an embodiment, the SST isan ATM. In an embodiment, the SST is operated in a customer-assistancemode of operation by a clerk as a POS terminal.

In an embodiment, the method 1200 performs the message and noteprocessing described above with the FIGS. 1-10 as one of themodules/nodes 110, 120, 130, 150, 135, 151-155, 161-165, and 170.

At 1210, the method 1200 receives a note along a transport path within amodular recycling device associated with a transaction that is beingprocessed on a transaction terminal. In an embodiment, the transactionterminal is a SST. In an embodiment, the SST is an ATM. In anembodiment, the SST is kiosk. In an embodiment, the transaction terminalis a POS terminal.

At 1220, the method 1200 validates a first security message associatedwith the note.

In an embodiment, at 1221, the method 1200 processes cryptographicoperations on a secure processor and validates cryptographic dataassociated with the first secure message.

At 1230, the method 1200 performs at least one operation on the notebased on the transaction.

In an embodiment, at 1231, the method 1200 activates at least oneelectromechanical component of the modular recycling device to performthe at least one operation. In an embodiment, the at least oneelectromechanical component is one or more of: a drum, a feeder, astacker, a transport path, an imaging device, and a shutter door.

At 1240, the method generates a second security message for the note.

In an embodiment, at 1241, the method 1200 encrypts a unique moduleidentifier with a cryptographic key and includes the encrypted uniquemodule identifier in the second security message. In an embodiment, themodule identifier is associated with the module (one of 110, 120, 130,150, 135, 151-155, 161-165, and 170) that is processing the method onits PCB, and the key is housed in secure memory of that moduleaccessible to just the module.

In an embodiment of 1241 and at 1242, the method 1200 inserts a currentdata and time stamp into the secure security message.

In an embodiment of 1242 and at 1243, the method 1200 digitally signsthe second security message.

At 1250, the method 1200 associates the second security message with thenote for subsequent processing related to the transaction.

In an embodiment, at 1251, the method 1200 sends the second securitymessage to a next processing node (one of 110, 120, 130, 150, 135,151-155, 161-165, and 170) that is to handle/process the note within themodular recycling device.

FIG. 13 is a diagram of still another method 1300 for operating themodule recycling device, according to an example embodiment. The method1300 is processed on at least one processor of a modular recyclingdevice.

In an embodiment, the modular recycling device is the modules 110, 120,130, 150, 135, 151-155, 161-165, and 170. In an embodiment, the modularrecycling device is integrated into a SST. In an embodiment, the SST isan ATM. In an embodiment, the SST is operated in a customer-assistancemode of operation by a clerk as a POS terminal.

In an embodiment, the method 1300 performs the message and noteprocessing described above with the FIGS. 1-10.

At 1310, the method 1300 urges a media item associated with atransaction at a transaction terminal through the modular recyclingdevice.

In an embodiment, at 1311, the method 1300 selectively activates anddeactivates electromechanical components of the modular recyclingdevice.

At 1320, the method 1300 validates security at each node of the modularrecycling device that handles the media item during the transaction.

In an embodiment, at 1321, the method 1300 enforces unique cryptographicsecurity at each node that handles the media item during thetransaction.

In an embodiment, at 1330, the method 1300 processes failover operationsat each node when a failure in the transaction is detected.

In an embodiment, at 1340, the method 1300 processes diagnostic testingat each node.

In an embodiment, at 1350, the method 1300 collaboratively andcooperatively processes the transaction and the media item during thetransaction through the modular recycling device.

In an embodiment of 1350 and at 1351, the method 1300 passes messagesbetween the nodes during the transaction as the media item transitionsfrom source nodes to target nodes.

In an embodiment, at 1360, the method 1300 connects a new node withinthe modular recycling device as an expansion media cassette.

In an embodiment of 1360 and at 1361, the method 1300 adds afeeder/stacker node to service the expansion media cassette.

In an embodiment, at 1370, the method 1300 disconnects and removes anexisting media cassette as a removed node within the modular recyclingdevice.

In an embodiment of 1370 and at 1372, the method 1300 disconnects andremoves an existing feeder/stacker nodes as a removed node that wasservicing the removed node.

FIG. 14 is a diagram of yet another method 1400 for operating themodular recycling device, according to an example embodiment. The method1400 is processed on at least one processor of a modular recyclingdevice.

In an embodiment, the modular recycling device is the modules 110, 120,130, 150, 135, 151-155, 161-165, and 170. In an embodiment, the modularrecycling device is integrated into a SST. In an embodiment, the SST isan ATM. In an embodiment, the SST is operated in a customer-assistancemode of operation by a clerk as a POS terminal.

In an embodiment, the method 1400 performs the message and noteprocessing described above with the FIGS. 1-10.

At 1410, the method 1400 configures a plurality of nodes (110, 120, 130,150, 135, 151-155, 161-165, and 170) as a modular recycling device forcollaborative and cooperative processing with one another during mediadeposits and media withdrawals at a SST.

In an embodiment, at 1411, the method 1400 configures each node toperform collaborative and cooperative processing when a connection ismade to at least one other node.

In an embodiment of 1411 at 1412, the method 1400 configures each nodeto continue with the collaborative and cooperative processing when anexisting node is removed and disconnected from remaining nodes.

In an embodiment, at 1413, the method 1400 configures each node toperform cryptographic security processing that validates communicationsbetween remaining nodes.

In an embodiment of 1413 and at 1414, the method 1400 provides each nodewith a mechanism to uniquely identify itself through the cryptographicsecurity processing to the remaining nodes.

At 1420, the method 1400 interfaces the nodes with one another throughconnections in the modular recycling device.

In an embodiment, at 1421, the method 1400 connects PCBs associated witheach node in a wired intra-network within the modular recycling device.

In an embodiment of 1421 and at 1422, the method 1400 connects some ofthe nodes via serial connections and other of the nodes via intermediatecommunication PCBs.

At 1430, the method 1400 activates the nodes for processing the mediadeposits and the media withdrawals within the SST.

FIG. 15 is a diagram of another method 1500 for operating the modularrecycling device, according to an example embodiment. The method 1500 isprocessed on at least one processor of a modular recycling device.

In an embodiment, the modular recycling device is the modules 110, 120,130, 150, 135, 151-155, 161-165, and 170. In an embodiment, the modularrecycling device is integrated into a SST. In an embodiment, the SST isan ATM. In an embodiment, the SST is operated in a customer-assistancemode of operation by a clerk as a POS terminal.

In an embodiment, the method 1500 performs the message and noteprocessing described above with the FIGS. 1-10.

At 1510, the method 1500 arranges media handling modules (110, 120, 130,150, 135, 151-155, 161-165, and 170) in a wired configuration as anintranet within a transaction terminal.

At 1520, the method 1500 configures each media handling module toperform operations for a valuable media item associated with atransaction being processed on the transaction terminal.

In an embodiment, at 1521, the method 1500 performs, by each mediahandling module, validation to ensure that a previous media handlingmodule, which handled the valuable media item was an authenticate mediahandling module.

In an embodiment of 1521 and at 1522, the method 1500 provides, by eachmedia handling module, a cryptographic unique identifier when thevaluable media item is ready for a next media handling module inaccordance with the transaction.

At 1530, the method 1500 configures each media handling module tocommunication with one another over the intranet (a networked containedwithin the transaction terminal or the media handling modules).

In an embodiment, at 1531, the method 1500 communicates, by each mediahandling module over the intranet, using messages received from aprevious media handling module and messages sent to a next mediahandling module.

According to an embodiment, at 1540, the method 1500 provides the mediahandling modules as: a pocket infeed module 110, a validator module 150,and escrow module 120, an upper transport module 130, a lower transportmodule 135, a plurality of feeder/stacker modules 151-155, a pluralityof valuable media cassettes 161-165, and at least one valuable mediaexception cassette module 170.

In an embodiment of 1540 and at 1541, the method 1500 provides thepocket infeed module 110 with a pocket interface module 111 forreceiving and dispensing the valuable media and provides the pocketinfeed module 110 with a pocket feeder/stacker module 112 for feedingand stacking the valuable media item from and to a bunch (stack) ofvaluable media items.

In an embodiment of 1541 and at 1542, the method 1500 provides theescrow module 120 with a first rotating drum 121 for storing thevaluable media item when the valuable media item is validated by thevalidator module 150. The method 1500 also provides the escrow module120 with a second rotating drum 122 for storing the valuable media itemwhen the valuable media item is invalidated by the validator module 150.

In an embodiment of 1542 and at 1542, the method 1500 provides each ofthe feeder/stacker modules 151-155 to a unique one of the plurality ofvaluable media cassettes 161-165.

In an embodiment, at 1550, the method 1500 provides interface expansionslots for adding new media handling modules to the intranet.

In an embodiment, at 1560, the method 1500 provides each of the mediahandling modules with a secure processor and secure memory forperforming cryptographic operations.

In an embodiment of 1560 and at 1561, the method 1500 provides each ofthe media handling modules with its own PCB.

In an embodiment of 1561 and at 1562, the method 1500 provides each ofthe media handling modules with its own firmware instructions forprocessing the cryptographic operations on its secure processorutilizing its secure memory.

FIG. 16 is a diagram of another method 1600 for operating the modularrecycling device, according to an example embodiment. The method 1600 isprocessed on at least one processor of a modular recycling device.

In an embodiment, the modular recycling device is the modules 110, 120,130, 150, 135, 151-155, 161-165, and 170. In an embodiment, the modularrecycling device is integrated into a SST. In an embodiment, the SST isan ATM. In an embodiment, the SST is operated in a customer-assistancemode of operation by a clerk as a POS terminal.

In an embodiment, the method 1600 performs the message and noteprocessing described above with the FIGS. 1-10.

At 1610, the method 1600 organizes media handling modules (110, 120,130, 150, 135, 151-155, 161-165, and 170) as a wired-network that isself-contained within a transaction terminal.

In an embodiment, at 1611, the method 1600 configures the wired networkas a self-contained intranet of the modular recycling device.

At 1620, the method 1600 processes media items through the mediahandling modules as a modular recycling device.

According to an embodiment, at 1621, the method 1600 provides each mediaitem at each media handling module a verification message.

In an embodiment of 1621 and at 1622, the method 1600 activates anddeactivates electromechanical components associated with each mediahandling module with each media item.

At 1630, the method 1600 verifies, through communications provided overthe wired network, each operation performed on each of the mediahandling modules for each of the media items.

In an embodiment, at 1631, the method 1600 processes the communicationsthrough cryptographic verification with each operation performed on eachof the media handling modules for each of the media items.

In an embodiment, at 1632, the method 1600 produces, by each mediahandling module, an identification and verification message after thatmedia handling module handles each of the media items.

FIG. 17 is a diagram of a modular media recycling device 1600, accordingto an example embodiment. The modular media recycling device 1600processes valuable media and includes a variety of hardware components,some of which were discussed above with reference to the FIGS. 1-10.

In an embodiment, the modular media recycling device 1700 are themodules 110, 120, 130, 150, 135, 151-155, 161-165, and 170.

In an embodiment, the modular media recycling device 1700 is integratedinto a media transaction terminal. In an embodiment, the mediatransaction terminal is a SST. In an embodiment, the SST is an ATM. Inan embodiment, the SST is a kiosk. In an embodiment, the mediatransaction terminal is a POS terminal.

The modular media recycling device 1700 includes a plurality of modules1701. Each module including a PCB and at least one hardware processor.

The modules 1702 are each configured to: i) activate electromechanicalcomponents to handle valuable media being processed with a transactionthrough the modular recycling device 1700, ii) validate receivedsecurity message from a previous module 1701 that handled the valuablemedia for the transaction, and iii) generate unique security messagesthat are independently validated by next modules 1701 that are to handlethe valuable media for the transaction.

FIG. 18 is a diagram of another modular media recycling device 1800,according to an example embodiment. The modular media recycling device1800 processes valuable media and includes a variety of hardwarecomponents, some of which were discussed above with reference to theFIGS. 1-10.

The modular media recycling device 1800 includes a plurality of mediahandling nodes 1801 (110, 120, 130, 150, 135, 151-155, 161-165, and170). Each media handling node 1801 configured to: i) communicate withremaining nodes 1801, ii) control electromechanical components of thatmedia handling node during a transaction associated with at least onemedia item, iii) verify communications from remaining nodes 1801, andiv) provide verification from that media handling node to the remainingnodes 1801 after processing the at least one media item of thetransaction.

In an embodiment, the modular media recycling device 1800 is integratedinto an ATM to process the transaction as a currency deposit being madeat the ATM or a currency withdrawal being requested at the ATM.

FIG. 19 is a diagram of still another modular media recycling device1900, according to an example embodiment. The modular media recyclingdevice 1700 processes valuable media and includes a variety of hardwarecomponents, some of which were discussed above with reference to theFIGS. 1-10.

The intranet 1901 configured to provide communications in aself-contained network within the modular recycling device 1900.

The modular media recycling device 1900 includes an intranet 1901 and aplurality of media handling nodes 1901 (110, 120, 130, 150, 135,151-155, 161-165, and 170). The media handling nodes 1801 configured to:i) generate some of the communications, ii) verify other of thecommunications, iii) activate electromechanical components to handlemedia items being processed through the modular recycling device 1900,and iv) cooperate to processing the media items for transactions beingperformed on a transaction terminal.

In an embodiment, the modular recycling device is integrated into thetransaction terminal for performing deposit and withdrawal transactionson the transaction terminal.

The above description is illustrative, and not restrictive. Many otherembodiments will be apparent to those of skill in the art upon reviewingthe above description. The scope of embodiments should therefore bedetermined with reference to the appended claims, along with the fullscope of equivalents to which such claims are entitled.

In the foregoing description of the embodiments, various features aregrouped together in a single embodiment for the purpose of streamliningthe disclosure. This method of disclosure is not to be interpreted asreflecting that the claimed embodiments have more features than areexpressly recited in each claim. Rather, as the following claimsreflect, inventive subject matter lies in less than all features of asingle disclosed embodiment. Thus the following claims are herebyincorporated into the Description of the Embodiments, with each claimstanding on its own as a separate exemplary embodiment.

The invention claimed is:
 1. A method, comprising: wiring a plurality ofmodules of a composite device representing a modular recycling device asa secure device-level Intranet, each module of the modular recyclingdevice comprising a processor and corresponding executable instructionsthat cause the corresponding processor to perform secure message passingwithin the secure device-level Intranet as processed media items aremoved through the modules of the modular recycling device: wherein themodules comprise: a pocket infeed module that receives deposited mediaitems within the modular recycling device or ejects dispensed mediaitems from the modular recycling device; a pocket feeder stacker modulethat receives a bunch of deposited media items within the modularrecycling device from the pocket infeed module or stacks a plurality ofthe dispensed media items into a bunch of dispensed media for ejectionthrough the pocket infeed module; a centralizer module that centralizestransported media items along a transport path within the modularrecycling device and delivers each transported media item to avalidation module; the validation module that performs media itemidentification, media item validation on each transported media item anddelivers each transported media item to an escrow module; the escrowmodule that temporarily holds the transported media items untilvalidated or authenticated by the validation module and deliversreleased media items that are validated to an upper transport module,and wherein the escrow module further comprises a temporary escrow thatholds damaged or counterfeit transported media items and directs thedamaged or counterfeit transported media items to an exception cassettemodule; the upper transport module that sends each transported mediaitem associated with the deposited media items along the transport pathto a lower transport module, and wherein the upper transport modulereceives each transported media item associated with the dispensed mediaitems from the lower transport module and sends the correspondingtransported media item to the pocket feeder stacker module; the lowertransport module that sends each transported media item received fromthe upper transport module to a corresponding feeder-stacker moduleassociated with a corresponding cassette module, and wherein the lowertransport module receives each transported media item associated withthe dispensed media items from a corresponding feeder-stacker module andsends the corresponding transported media item to the upper transportmodule; feeder-stacker modules that sends each transported media itemreceived from the lower transport module to cassette modules or thatreceives each transported media item associated with the dispensed mediaitems from a corresponding cassette module to the lower transportmodule; cassette modules that store each transported media item receivedfrom a corresponding feeder-stacker module or that provides eachtransported media item associated with the dispensed media items to acorresponding feeder-stacker module; and the exception cassette modulethat stores the damaged or counterfeit transported media items receivedfrom the temporary escrow of the escrow module; generating a securitymessage when an item of media is detected at a sensor of a modularrecycling device, wherein generating further includes including a moduleidentifier within the security message; processing the item; andforwarding the item within the modular recycling device with thesecurity message for downstream processing associated with the item bymoving the item to a next module and providing the security message tothe next module through the secure device-level Intranet, wherein eachmodule associated with the downstream processing receives the securitymessage with the item during processing of the item.
 2. The method ofclaim 1, wherein generating further includes encrypting the securitymessage with cryptographic operations.
 3. The method of claim 1, whereingenerating further includes generating the security message in responseto receiving a different security message already associated with theitem.
 4. The method of claim 3, wherein generating further includesauthenticating the different security message before generating thesecurity message.
 5. The method of claim 4, wherein authenticatingfurther includes processing cryptographic operations to verify that aprevious module that processed the item generated and provided thedifferent security message.
 6. The method of claim 1, wherein generatingfurther includes receiving the item from a transport track that movesthe item through the modular recycling device in accordance with atransaction being processed on a Self-Service Terminal (SST) having themodular recycling device integrated therein.
 7. The method of claim 1,wherein processing further includes performing data operations inaccordance with a transaction being processed that is associated withthe item.
 8. The method of claim 1, wherein forwarding further includesinstructing electromechanical components of the modular recycling deviceto activate and deactivate to forward the item within the modularrecycling device for the downstream processing.
 9. A method, comprising:receiving a currency note (note) along a transport path within a modularrecycling device associated with a transaction being processed on atransaction terminal; obtaining a first security message over asecure-device level Intranet defined within the modular recycling devicebetween modules of the modular recycling device, wherein the firstsecurity message comprises a first module identifier associated with thecorresponding module that generated the first security message;validating a first security message associated with the note; performingat least one operation on the note based on the transaction; generatinga second security message for the note, wherein the second securitymessage comprising a second module identifier associated with thecorresponding module that performs the generating; and associating thesecond security message with the note within the secure-device levelIntranet for subsequent processing related to the transaction; andprocessing the method on each of the modules within the modularrecycling device for deposited and dispensed notes; wherein the modulescomprising: a pocket infeed module that receives the deposited noteswithin the modular recycling device or ejects the dispensed notes fromthe modular recycling device; a pocket feeder stacker module thatreceives a bunch of deposited notes within the modular recycling devicefrom the pocket infeed module or stacks a plurality of the dispensednotes into a bunch of dispensed notes for ejection through the pocketinfeed module; a centralizer module that centralizes transported notesalong a transport path within the modular recycling device and deliverseach transported note to a validation module; the validation module thatperforms media item identification, media item validation on eachtransported note and delivers each transported note to an escrow module;the escrow module that temporarily holds the transported notes untilvalidated or authenticated by the validation module and deliversreleased notes that are validated to an upper transport module, andwherein the escrow module further comprises a temporary escrow thatholds damaged or counterfeit transported notes and directs the damagedor counterfeit transported notes to an exception cassette module; theupper transport module that sends each transported note associated withthe deposited notes along the transport path to a lower transportmodule, and wherein the upper transport module receives each transportednote associated with the dispensed notes from the lower transport moduleand sends the corresponding transported note to the pocket feederstacker module; the lower transport module that sends each transportednote received from the upper transport module to a correspondingfeeder-stacker module associated with a corresponding cassette module,and wherein the lower transport module receives each transported noteassociated with the dispensed notes from a corresponding feeder-stackermodule and sends the corresponding transported note to the uppertransport module; feeder-stacker modules that sends each transportednote received from the lower transport module to cassette modules orthat receives each transported note associated with the dispensed notesfrom a corresponding cassette module to the lower transport module;cassette modules that store each transported note received from acorresponding feeder-stacker module or that provides each transportednote associated with the dispensed notes to a correspondingfeeder-stacker module; and the exception cassette module that stores thedamaged or counterfeit notes received from the temporary escrow of theescrow module.
 10. The method of claim 9, wherein validating furtherincludes verifying that the note was last processed by a module of themodular recycling device that is authentic and secure.
 11. The method ofclaim 9, wherein validating further includes processing cryptographicoperations on a secure processor and validating cryptographic dataassociated with the first security message.
 12. The method of claim 9,wherein performing further includes activating at least oneelectromechanical component of the modular recycling device.
 13. Themethod of claim 9, wherein generating further includes encrypting thesecond module identifier with a cryptographic key and including anencrypted second module identifier in the second security message. 14.The method of claim 13, wherein encrypting further includes inserting acurrent date and time stamp into the second security message.
 15. Themethod of claim 13, wherein inserting further includes digitally signingthe second security message.
 16. The method of claim 9, whereinassociating further includes sending the second security message to anext processing node that is to handle the note within the modularrecycling device.
 17. A modular recycling device, comprising: aplurality of modules each module including a Printed Circuit Board (PCB)and at least one hardware processor, wherein the modules are wiredtogether as a secure device-level Intranet for communication usingsecure messages passed within the secure device-level Intranet; whereinthe modules are configured to: i) activate electromechanical componentsto handle valuable media being processed with a transaction through themodular recycling device, ii) validate received security message from aprevious module that handled the valuable media for the transactionthrough the secure device-level Intranet, and iii) generate uniquesecurity messages that are independently validated by next modules thatare to handle the valuable media for the transaction over the securedevice-level Intranet, wherein each unique security message comprising amodule identifier for the corresponding module that generated thecorresponding unique security message; wherein the modules comprise: apocket infeed module that receives deposited media items within themodular recycling device or ejects dispensed media items from themodular recycling device; a pocket feeder stacker module that receives abunch of deposited media items within the modular recycling device fromthe pocket infeed module or stacks a plurality of the dispensed mediaitems into a bunch of dispensed media for ejection through the pocketinfeed module; a centralizer module that centralizes transported mediaitems along a transport path within the modular recycling device anddelivers each transported media item to a validation module; thevalidation module that performs media item identification, media itemvalidation on each transported media item and delivers each transportedmedia item to an escrow module; the escrow module that temporarily holdsthe transported media items until validated or authenticated by thevalidation module and delivers released media items that are validatedto an upper transport module, and wherein the escrow module furthercomprises a temporary escrow that holds damaged or counterfeittransported media items and directs the damaged or counterfeittransported media items to an exception cassette module; the uppertransport module that sends each transported media item associated withthe deposited media items along the transport path to a lower transportmodule, and wherein the upper transport module receives each transportedmedia item associated with the dispensed media items from the lowertransport module and sends the corresponding transported media item tothe pocket feeder stacker module; the lower transport module that sendseach transported media item received from the upper transport module toa corresponding feeder-stacker module associated with a correspondingcassette module, and wherein the lower transport module receives eachtransported media item associated with the dispensed media items from acorresponding feeder-stacker module and sends the correspondingtransported media item to the upper transport module; feeder-stackermodules that sends each transported media item received from the lowertransport module to cassette modules or that receives each transportedmedia item associated with the dispensed media items from acorresponding cassette module to the lower transport module; cassettemodules that store each transported media item received from acorresponding feeder-stacker module or that provides each transportedmedia item associated with the dispensed media items to a correspondingfeeder-stacker module; and the exception cassette module that stores thedamaged or counterfeit transported media items received from thetemporary escrow of the escrow module.
 18. The modular recycling deviceof claim 17, wherein the modular recycling device is integrated into amedia transaction terminal.